[Webkit-unassigned] [Bug 69570] DFG should not always speculate that ConvertThis is operating on an object

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=69570


Oliver Hunt <oliver at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #110042|review?                     |review+
               Flag|                            |




--- Comment #3 from Oliver Hunt <oliver at apple.com>  2011-10-06 15:38:00 PST ---
(From update of attachment 110042)
View in context: https://bugs.webkit.org/attachment.cgi?id=110042&action=review

> Source/JavaScriptCore/dfg/DFGSpeculativeJIT64.cpp:1801
> +            m_jit.andPtr(MacroAssembler::TrustedImm32(~TagBitUndefined), scratchGPR);

Does this handle null and undefined?

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.